[ 
https://issues.apache.org/jira/browse/SOLR-7896?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15932776#comment-15932776
 ] 

Jan Høydahl commented on SOLR-7896:
-----------------------------------

Solr may be protected by any AuthPlugin, not only BasicAuth, so we need 
something that is future proof too. Of course if we limit this to only 
supporting BasicAuthPlugin we could let the UI add user:pass for all requests 
directly. However, I was hoping to have something generic. So for the BasicAuth 
case I think we could be using the email/password flow: 
https://github.com/sahat/satellizer#-login-with-email-and-password and let Solr 
backend validate the user/pass?

> Add a login page for Solr Administrative Interface
> --------------------------------------------------
>
>                 Key: SOLR-7896
>                 URL: https://issues.apache.org/jira/browse/SOLR-7896
>             Project: Solr
>          Issue Type: New Feature
>          Components: Admin UI, security
>    Affects Versions: 5.2.1
>            Reporter: Aaron Greenspan
>              Labels: authentication, login, password
>
> Out of the box, the Solr Administrative interface should require a password 
> that the user is required to set.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@lucene.apache.org
For additional commands, e-mail: dev-h...@lucene.apache.org

Reply via email to